What are people doing in wait of Enhance's built in firewall controls?

Zoinkies

I was using a cloud providers edge-firewall, but it turns out it's a bit naff.

So, was going to switch to iptables/UFW wrapper, what is everyone else doing?

cPFence

UFW is great for basic firewall management, like allowing or disallowing specific ports and IPs, while IPTables can handle more advanced configurations as needed. However, it's important to understand the intricacies, especially when working with the Enhance control panel, to ensure smooth integration with Docker.

If you have advanced requirements, such as blocking specific countries or implementing other complex rules, it may take some time to configure everything correctly. But once set up, it will serve you well.

twest

I just use default ufw as needed, why use anything else? I've got cloudflare wrapped around all services and sites at DNS level, and WP sites all have wordfence firewall configured at the extremely local level. Don't see any need to add anymore layers on top of that stack.

I especially try keeping the servers as vanilla as possible, so they're as compatible with updates as possible and don't run into critical bugs and conflicts (as we see pop up in the forums all the time).

cosmoshosting

UFW is fine and already preinstalled.

If you want anything fancier cPGuard plays nice.

Zoinkies

cosmoshosting Does cPGuard have a firewall, where you can allow/disallow ports and IP?

ronald

I use the default UFW configured from Enhance and the firewall at my cloud/server-provider. This is sufficient for my requirements right now.